mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2025-05-22 19:43:57 +00:00
Added support for web-vault v2022.9
- The new web-vault version supports fastmail.com anon email, add the correct api host to support it. - Removed Firefox Relay, this seems only to be supported on SaaS. - Added a function to the two-factor api to prevent 404 errors.
This commit is contained in:
parent
a62dc102fb
commit
94be67eac1
2 changed files with 28 additions and 3 deletions
|
@ -60,7 +60,7 @@ impl Fairing for AppHeaders {
|
|||
// Leaked Passwords check: api.pwnedpasswords.com
|
||||
// 2FA/MFA Site check: 2fa.directory
|
||||
// # Mail Relay: https://bitwarden.com/blog/add-privacy-and-security-using-email-aliases-with-bitwarden/
|
||||
// app.simplelogin.io, app.anonaddy.com, relay.firefox.com
|
||||
// app.simplelogin.io, app.anonaddy.com, api.fastmail.com
|
||||
let csp = format!(
|
||||
"default-src 'self'; \
|
||||
script-src 'self'{script_src}; \
|
||||
|
@ -68,7 +68,7 @@ impl Fairing for AppHeaders {
|
|||
img-src 'self' data: https://haveibeenpwned.com/ https://www.gravatar.com {icon_service_csp}; \
|
||||
child-src 'self' https://*.duosecurity.com https://*.duofederal.com; \
|
||||
frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; \
|
||||
connect-src 'self' https://api.pwnedpasswords.com/range/ https://2fa.directory/api/ https://app.simplelogin.io/api/ https://app.anonaddy.com/api/ https://relay.firefox.com/api/; \
|
||||
connect-src 'self' https://api.pwnedpasswords.com/range/ https://2fa.directory/api/ https://app.simplelogin.io/api/ https://app.anonaddy.com/api/ https://api.fastmail.com/; \
|
||||
object-src 'self' blob:; \
|
||||
frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* {allowed_iframe_ancestors};",
|
||||
icon_service_csp=CONFIG._icon_service_csp(),
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue